Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
File: V9mTMZ3MkpdpQxiyRus29V_xNw4.mft (raw, json)
Hash identifier: 6O6x1ib2Dq0cVzPhaO0NJK8//wzruBSx3EqK0XyroGc=
Subject key identifier: FA:F7:0B:72:86:D4:48:04:10:5F:EF:9E:27:3C:76:CE:F5:FA:F3:1C
Authority key identifier: 57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E
Certificate issuer: /CN=57d993319dcc9297694318b246eb36f55ff1370e
Certificate serial: 019CABD9E1E1A358F2FF79D3629F297520EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
Manifest number: 123A
Signing time: Mon 02 Mar 2026 00:01:48 +0000
Manifest this update: Mon 02 Mar 2026 00:01:48 +0000
Manifest next update: Tue 03 Mar 2026 00:01:48 +0000
Files and hashes: 1: V9mTMZ3MkpdpQxiyRus29V_xNw4.crl (hash: pngk974CKWdeI5p95kITzdeWHDL6rmb8ixaF84gLjOM=)
2: q1BEcW3yDL01Np_jgFRFv-1DHcU.roa (hash: Y97YBZ6a5ecPlLjsFAxO1R/MZtwx3Kn20kQbNzjd2go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e1:e1:a3:58:f2:ff:79:d3:62:9f:29:75:20:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d993319dcc9297694318b246eb36f55ff1370e
Validity
Not Before: Mar 2 00:01:48 2026 GMT
Not After : Mar 3 00:01:48 2026 GMT
Subject: CN=faf70b7286d44804105fef9e273c76cef5faf31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:7c:8d:58:17:cb:a9:a6:16:cc:52:d0:a9:
9c:2f:d5:5c:58:b9:85:de:f6:67:b8:92:2b:c9:24:
3a:36:98:4f:39:2b:b2:53:c6:e7:ba:af:48:30:1d:
ba:0d:c2:38:99:fd:83:91:3c:a6:c5:72:de:c5:8e:
2e:47:7d:78:ac:81:17:97:e7:d3:f5:5e:1f:0c:2a:
8f:7f:29:b1:fc:2f:f1:ec:5c:2b:f3:d1:6a:8f:fc:
a2:c5:f1:14:82:98:cf:52:4a:2a:28:1c:fb:9c:29:
26:dc:e5:17:07:ec:30:63:47:65:24:b5:75:dc:1f:
28:df:86:61:5d:36:b3:fb:4c:a7:f9:a0:b6:bc:8b:
56:8e:6f:04:6c:25:0d:4e:dc:0a:c8:5b:a8:25:ef:
5f:a5:aa:0c:be:93:00:1a:5d:da:e8:eb:e5:78:36:
14:69:46:91:4a:c6:0a:d5:10:8c:e4:e3:bb:30:5f:
13:41:8e:60:26:80:aa:16:31:0f:7d:a1:c4:a2:e3:
1b:8d:49:8f:f8:9b:0f:e7:be:7c:c0:3c:df:8e:3d:
a2:6f:3e:15:b2:8a:da:72:20:13:ba:33:c0:c2:ff:
72:a6:4f:b1:1d:82:4e:d0:d3:cd:6b:68:c8:a7:58:
1c:47:77:11:48:60:8b:4a:6a:62:5e:95:45:96:04:
5f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F7:0B:72:86:D4:48:04:10:5F:EF:9E:27:3C:76:CE:F5:FA:F3:1C
X509v3 Authority Key Identifier:
keyid:57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d3:1d:e6:9c:9b:60:05:1d:9f:ad:a9:de:9e:1d:11:b1:3d:
c3:22:73:22:13:32:65:b4:a4:51:da:12:3b:62:4c:31:27:af:
13:5c:d6:dc:bb:5d:da:b3:a6:8f:28:43:37:94:83:2a:10:f9:
9d:7c:ca:36:fe:15:4d:77:39:3b:b5:19:c4:28:b8:21:bd:a1:
e1:98:62:ac:7a:63:c9:a4:46:2e:a0:10:5d:2b:10:80:1d:2d:
87:37:44:9f:2e:02:9f:d1:54:05:8c:82:95:b3:63:88:5f:60:
2e:e9:ba:76:b8:90:21:6e:89:ad:66:50:ca:4e:32:05:80:f3:
9a:7d:99:a1:25:e1:0d:c1:42:00:fc:7b:b1:27:2d:a4:33:35:
37:fd:d2:3c:cc:32:1e:d8:d2:b2:c8:98:0f:0d:65:b0:41:05:
7b:f1:e9:6c:e2:15:f6:e3:e7:84:b8:68:11:8f:6d:0d:71:20:
24:bd:09:bb:1b:aa:35:da:0d:81:fb:c6:31:84:72:8a:a5:dd:
65:11:68:ef:35:ea:42:cd:2a:cc:4f:48:42:93:b8:51:d9:64:
d9:ef:b7:0e:b2:35:59:13:78:9d:cb:dd:a5:c3:9c:9a:d7:08:
d4:14:cd:e2:33:50:d8:3b:ba:28:9a:54:03:8e:3f:d0:82:64:
9a:e8:3c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:45 2026 by rpki-client